The Claims 



1. (Currently amended) A method , implemented in a registration 
authority, comprising: 

receiving a request, from a requestor, for a password to be used by a 
device when communicating with [[a]] the registration authority operating as a 
protocol gateway between the device and a certificate authority ; 

authenticating the requestor; 

generating the password; 

adding the password to a password table; and 

returning the password to the requestor for use by the device. 

2. (Original) A method as recited in claim 1, wherein the device 
comprises a router. 

3. (Original) A method as recited in claim 1, wherein generating 
the password comprises generating a random number as the password. 

4. (Original) A method as recited in claim 1, wherein receiving, 
authenticating, and returning include using Secure Sockets Layer (SSL) to 
maintain secure communication with the device. 
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5. (Original) A method as recited in claim 1, further comprising 
keeping the password active for a selected amount of time. 

6. (Canceled). 

7. (Original) A method as recited in claim 5, wherein keeping the 
password active for a selected amount of time comprises removing the 
password from the password table after the selected amount of time. 

8. (Original) A method as recited in claim 1 , further comprising: 
receiving a request from the device, the request including a request 

password; 

checking whether the request password is included in the password 
table; and 

processing the request if the request password is included in the 
password table, otherwise rejecting the request. 

9. (Original) A method as recited in claim 8, further comprising 
removing, if the request password is included in the password table, the request 
password from the password table. 
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10. (Currently amended) One or more computer-readable media 
having stored thereon a plurality of instructions that implement a registration 
authority and that , when executed by one or more processors, causes the one or 
more processors to perform acts comprising: 

receiving a request, from a requestor, for a password to be used by a 
device when communicating with [[a]] the registration authority operating as a 
protocol gateway between the device and a certificate authority ; 

authenticating the requestor; 

generating the password; 

adding the password to a password table; and 

returning the password to the requestor for use by the device. 

11. (Original) One or more computer-readable media as recited in 
claim 10, wherein the device comprises a router. 

12. (Original) One or more computer-readable media as recited in 
claim 10, wherein generating the password comprises generating a random 
number as the password. 

13. (Original) One or more computer-readable media as recited in 
claim 10, wherein receiving, authenticating, and returning include using Secure 
Sockets Layer (SSL) to maintain secure communication with the device. 
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14. (Original) One or more computer-readable media as recited in 
claim 10, wherein the plurality of instructions further cause the one or more 
processors to perform acts comprising keeping the password active for a 
selected amount of time. 

15. (Original) One or more computer-readable media as recited in 
claim 14, wherein keeping the password active for a selected amount of time 
comprises marking the password as invalid after the selected amount of time. 

16. (Original) One or more computer-readable media as recited in 
claim 14, wherein keeping the password active for a selected amount of time 
comprises removing the password from the password table after the selected 
amount of time. 

17. (Original) One or more computer-readable media as recited in 
claim 10, wherein the plurality of instructions further cause the one or more 
processors to perform acts comprising: 

receiving a request from the device, the request including a request 
password; 

checking whether the request password is included in the password 
table; and 

processing the request if the request password is included in the 
password table, otherwise rejecting the request. 
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18. (Original) One or more computer-readable media as recited in 
claim 17, wherein the plurality of instructions further cause the one or more 
processors to perform acts comprising removing, if the request password is 
included in the password table, the request password from the password table. 

19. (Currently amended) A registration authority system comprising: 
means for receiving a request, from a requestor, for a password to be 

used by a device when communicating with [[a]] the registration authority 
operating as a protocol gateway between the device and a certificate authority ; 

means for authenticating the requestor; 

means for generating the password; 

means for adding the password to a password table; and 

means for returning the password to the requestor for use by the device. 

20. (Original) A system as recited in claim 19, wherein the device 
comprises a router. 

21. (New) A method as recited in claim 1, further comprising: 
receiving the password as part of a subsequent request from the device; 

and 

comparing the received password to the password in the password table 
to verify that the subsequent request actually came from the device. 
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